fix: bug in DER decoding